Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
File: HdxT0d56LvfrK5DICRVUQUAEJIg.mft (raw, json)
Hash identifier: 9roHWDW/i2cDsf5d4iq4PrIjPSetWDFXGh6BtgTn71I=
Subject key identifier: A6:62:6E:51:64:16:A8:85:16:45:63:FA:FD:3F:AD:CB:53:38:D2:36
Authority key identifier: 1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
Certificate issuer: /CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Certificate serial: 019A4EBD4FFB8F9FD084B088C224ADA17BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 12:00:20 +0000
Manifest this update: Tue 04 Nov 2025 12:00:20 +0000
Manifest next update: Wed 05 Nov 2025 12:00:20 +0000
Files and hashes: 1: AAZYcUjhuGAJA3sXjywaEslf598.roa (hash: RBp9easJVYqUVgaIiMMNSM2ioBAAirvckRHOuxL4X0g=)
2: HdxT0d56LvfrK5DICRVUQUAEJIg.crl (hash: Gou6xnQgu7tVi4qb+eaqM+jxiAP/6ZuD4yD6kQSAv2Y=)
3: KX2FVoJMwagFqXSqm7WmM6GiAdc.roa (hash: kL6N1Ap9alUNCwv0399F2Foe8bxiyXhyi55mwtllJAY=)
4: vMt7TQ-qRZJTqOxHDMRDIZs6N9Q.roa (hash: 3Jk3Icytf7EIaMHCfe+p0xudth/qPlKoWzoPX62k9oA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:4f:fb:8f:9f:d0:84:b0:88:c2:24:ad:a1:7b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ddc53d1de7a2ef7eb2b90c80915544140042488
Validity
Not Before: Nov 4 12:00:20 2025 GMT
Not After : Nov 5 12:00:20 2025 GMT
Subject: CN=a6626e516416a885164563fafd3fadcb5338d236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:06:89:9e:cf:96:51:50:c8:d6:20:b1:47:
60:ba:82:46:cf:5e:12:bf:92:fe:5d:83:be:9c:9a:
dc:75:2c:26:1b:db:66:cf:ff:56:e3:9b:97:d2:df:
41:29:d0:11:0c:26:f5:fd:dc:e6:ce:21:01:9a:57:
be:b7:33:1a:d8:70:a1:ba:a1:b3:6a:d6:16:05:2e:
0f:7e:c2:0d:25:c1:95:43:5e:86:ed:82:ba:11:8a:
24:40:f4:58:fa:62:7b:9b:68:86:4e:bc:1e:89:13:
4d:55:ad:ce:93:f0:e4:4f:83:4e:44:7b:54:ea:d5:
16:7c:48:81:8c:51:43:06:55:0f:91:e5:4a:46:5e:
cd:78:ae:7b:43:77:c2:d6:4d:c1:19:a4:bb:e4:3b:
21:82:53:29:03:36:30:b2:8b:54:cb:d0:75:82:2a:
4a:b0:fa:6c:7b:2e:1e:53:cd:8c:8e:3b:50:19:e1:
17:83:b1:b4:e3:b7:99:f8:81:24:90:18:a0:b5:ba:
4e:65:8e:28:2c:3f:ec:f9:57:90:5d:ff:fb:0f:e8:
34:e1:56:b7:ed:c3:7e:76:cc:28:84:8e:19:bb:8c:
3a:9c:b6:e7:cd:1a:f0:f7:bc:af:a7:8f:cc:28:67:
b4:13:85:8e:64:17:19:4c:53:e5:a4:e9:3b:bf:25:
e2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:62:6E:51:64:16:A8:85:16:45:63:FA:FD:3F:AD:CB:53:38:D2:36
X509v3 Authority Key Identifier:
keyid:1D:DC:53:D1:DE:7A:2E:F7:EB:2B:90:C8:09:15:54:41:40:04:24:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdxT0d56LvfrK5DICRVUQUAEJIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/557414-d993-4cbf-8181-48671fb7d380/1/HdxT0d56LvfrK5DICRVUQUAEJIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ff:f0:43:75:f3:64:50:0e:a3:ee:cd:d7:c0:ee:ab:73:0f:
3d:62:56:81:08:27:a6:e2:36:63:3a:41:a4:97:75:bf:22:ad:
13:b6:f3:93:f1:f0:50:91:08:ea:20:bb:2b:a5:91:c7:cc:35:
23:c3:9e:2b:60:b0:7d:4c:99:b5:c4:8f:17:cc:44:d3:20:07:
a8:1b:86:9d:2f:45:23:f1:b3:37:97:cc:a0:d0:62:29:61:7d:
7b:57:06:5c:81:83:50:8c:54:48:9b:58:69:cf:1f:e9:d2:98:
a9:c9:56:d8:e7:02:a3:dc:e1:08:da:44:56:e0:6d:25:c6:66:
4b:20:ce:48:cb:7e:7b:38:fb:14:cf:62:eb:e4:0e:7b:2b:9e:
90:fd:4c:f1:59:c0:01:92:ab:b7:ce:6f:5d:94:e8:53:af:38:
1d:df:e3:e8:be:48:bd:5e:7b:c2:b1:d6:af:c2:0f:2c:c3:a2:
81:91:98:ec:56:e8:7a:4a:3d:dc:f6:52:8a:62:34:95:d7:a5:
dd:0e:9c:f8:a8:49:8f:76:45:4f:f1:a7:f5:ef:e5:39:ab:ed:
f6:4c:f1:00:8a:ca:aa:4a:dd:e1:fa:50:45:cc:4b:6a:3f:d9:
4c:9c:40:c3:e8:f9:55:74:e0:ef:2a:eb:ca:78:c9:e1:8d:9f:
ac:1a:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:21 2025 by rpki-client